Skip to content

Registration endpoint accepts invalid email addresses #1

@elo-mate

Description

@elo-mate

The POST /register endpoint does not validate email addresses. Users can submit forms with invalid emails like 'notanemail' or empty strings. The validateEmail function exists in src/utils/validation.js but is imported and never used in the route handler.

Steps to reproduce:

  1. POST /register with body: { "email": "notanemail", "name": "Test" }
  2. Response is 201 Created — should be 400 Bad Request

Expected: Return 400 with error message when email is invalid.
Actual: Accepts any string as email.

Metadata

Metadata

Assignees

No one assigned

    Labels

    approvedIssue approved for developmentin-progressWork is in progresstriagedIssue has been triaged

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions